9

I'm wondering if I can configure a GAE Flexible "service" to use a specific service account ID instead of the default service account ID, which all services run as.

Why? I want to isolate each service's permissions, but also simplify the service code by allowing it to still use the Application Default credentials method of calling Google APIs.

Is there an app.yaml configuration/environment variable where I can control this?

I didn't see the answer here https://cloud.google.com/appengine/docs/flexible/java/migrating or https://cloud.google.com/appengine/docs/flexible/java/authorizing-apps

I also found this https://cloud.google.com/compute/docs/access/create-enable-service-accounts-for-instances#using which tells me how to do what I want at the compute engine level, but I don't see how to apply it at the GAE Flex managed level.

If this is not possible, what is the next best alternative?

2
  • Thank you for asking this question. Have you found any solution or workaround?
    – Dima
    Jun 14, 2017 at 17:44
  • Hi, I am also looking for solution to do the same .. still searching Feb 12, 2018 at 14:41

1 Answer 1

1

This isn't possible at the moment. The best way to go forward with this would be to open a feature request here.

2

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.